last executing test programs: 21m19.451689586s ago: executing program 4 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m19.068810828s ago: executing program 4 (id=35): r0 = userfaultfd(0x80001) r1 = memfd_create(0x0, 0xe) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) userfaultfd(0x801) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x20000) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 21m18.061808025s ago: executing program 4 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21m17.774666302s ago: executing program 4 (id=42): socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002cc0)={[{@fat=@flush}, {@fat=@showexec}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlate}, {@utf8no}, {@fat=@quiet}, {@fat=@umask={'umask', 0x3d, 0x8000}}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 21m17.509673117s ago: executing program 4 (id=45): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x810) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 21m16.485166975s ago: executing program 4 (id=49): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0xa, 0x18000000000, 0x5, [@default, @bcast, @bcast, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 21m16.389551011s ago: executing program 32 (id=49): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0xa, 0x18000000000, 0x5, [@default, @bcast, @bcast, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 17m33.605716781s ago: executing program 3 (id=961): unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = memfd_secret(0x80000) close(r2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x20000, 0x0, 0x0, 0xb7}}, 0xe8) 17m31.711850949s ago: executing program 3 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 17m28.784472396s ago: executing program 3 (id=976): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 17m27.768133685s ago: executing program 3 (id=979): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$sock(0xffffffffffffffff, 0x0, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) shutdown(r0, 0x2) 17m25.946587019s ago: executing program 3 (id=984): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@bsdgroups}, {@noquota}, {@grpjquota}, {@grpjquota}, {@oldalloc}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'grpjquota='}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@seclabel}, {@flag='mand'}, {@audit}]}, 0x2, 0x504, &(0x7f0000000c00)="$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") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 17m25.845254204s ago: executing program 3 (id=987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 17m9.232805802s ago: executing program 33 (id=987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 9m11.040974556s ago: executing program 5 (id=2485): r0 = socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000100)={@default, @bcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f0000000000)='N\x00\xca\xe9\xba\xbf\x85\x03\xb8\xca\t\x00\x00\x00\x00\x00\x00\x00e\xb9\xef8\x99\xba\aM\xe3\xd9T\xda\xfa1{B\x9e\xc8\xfa\xc4\xdcs52\xac8s\xd4\x1cmn8g\x99*\xa1N\x11\x93\xf1 \x19\xda\xa1\x8cY[\xe8\xee\x96[\x9c\xc7h\x8d.\x1d\xb9\xc3<\xed#~\xdd]Z\xa6\x9a\xe02\x96\x06\x0f\xf5\xed1\x1c\xa2\x93\xb9\xf87\xd8\x04\xe9\x0f\x87\x80\x94[\t\xcb\x80.l\x91\xaa\xb6\x04\x7f\x98\x7f^\xcb\xa9N1Z\xce\xf6\x84QF\x86\x03\xed\x7f\xf5_\x7f\xc0M{\xe7\xae\xa8\xef\x9c\xb4NN<\xe8\x16\xed7\xc5\x17\x1d\x96J\xf4cF\x86\xa2\x99B\xd1 hX\xb4KQ.X\xfet\t\x8d,\r\x00\xce\x85\x16\xd9\x8ak\xd0\xb6aa\x14\x1auD\xc3\xd9\x91\x1dR\xbb\x7f\xd4s\x1a\xb0\xb2(\x9b\x99\'\xf5F\xee\f\x96\xd9?/^\x9e\xeej\xe2\xd2e', 0xa8dceec72f852b7e, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5ea000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) 9m9.965152839s ago: executing program 5 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 9m8.873169532s ago: executing program 5 (id=2488): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) 9m7.01042801s ago: executing program 5 (id=2491): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x1, 0x6}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1d, '\x00', [@generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0x3fffff0e, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x60, 0x29, 0x36, {0x5e, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m5.841078257s ago: executing program 5 (id=2493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYBLOB="cb4fea91273b05f3b723fbc7fbdf131c66b7068e", @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x35}, @in=@loopback, 0x0, 0x0, 0x4e20, 0x800, 0xa}, {0x72, 0x328, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x73a, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x6e6bb3, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x6c}, 0x2, @in=@loopback, 0x1504, 0x0, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYBLOB="040a00000000000008000200454713f3e20d95f351788c7c56b17d4ca04b000556c16a17bbebbb997b70", @ANYRES8=r1, @ANYBLOB="1a0005f5", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0], 0x7c, 0x3) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 9m5.716001765s ago: executing program 5 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x1fe, @mcast1, 0x80000001}, 0x72) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x100000004) 8m49.098033366s ago: executing program 34 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x1fe, @mcast1, 0x80000001}, 0x72) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x100000004) 3m47.71333729s ago: executing program 0 (id=3377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) 3m46.341341359s ago: executing program 0 (id=3381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000010) syz_open_dev$swradio(0x0, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3m45.153527339s ago: executing program 0 (id=3387): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) 3m39.326385845s ago: executing program 0 (id=3400): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x88, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 3m38.351705082s ago: executing program 0 (id=3402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) 3m32.306997381s ago: executing program 0 (id=3416): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 3m15.22898653s ago: executing program 35 (id=3416): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 13.485322939s ago: executing program 8 (id=3903): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x88, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 12.277529369s ago: executing program 2 (id=3908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 10.949198396s ago: executing program 2 (id=3911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 9.357230838s ago: executing program 2 (id=3914): syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8840) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40106e80, &(0x7f0000000000)={0x1, 0x100000000, 0x9, 0x7fffffff, 0x4000040c, 0x4fe4, 0x2401}) 9.346664389s ago: executing program 1 (id=3915): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@i_version}]}, 0x22, 0x75d, &(0x7f0000000b00)="$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") chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.745853233s ago: executing program 6 (id=3916): syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910", @ANYRES16=0x0], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b", 0x43) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x2}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x2c020400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701000003000000669b86e9000000001800"], 0x30, 0x20000000}], 0x1, 0xc050) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?', @ANYRES32=r8, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl(r2, 0x8b2c, &(0x7f0000000040)) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xf) 8.310624618s ago: executing program 7 (id=3917): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bind$packet(r6, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 7.519287064s ago: executing program 6 (id=3918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x48) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0) r9 = socket(0x10, 0x803, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)={[0x0, &(0x7f0000000440)=':}\x00', &(0x7f0000000480)='(\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='syzkaller\x00']}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 7.499854256s ago: executing program 7 (id=3919): socket$inet6(0xa, 0x80000, 0xe6a2) setuid(0xffffffffffffffff) signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 7.499540965s ago: executing program 1 (id=3928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 6.91387642s ago: executing program 2 (id=3920): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$isdn(0x22, 0x3, 0x25) bind(r3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x1, 0xf8, 0x9}, 0x80) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0xf3, 0x3) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 5.915146518s ago: executing program 1 (id=3921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 5.911847018s ago: executing program 6 (id=3922): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000600)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f000059b000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0xd6fff000) timer_create(0x2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, 0x0}}], 0x1, 0x4c040) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r8, 0x0, 0x0, 0x101, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5.87283722s ago: executing program 8 (id=3923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 4.83859398s ago: executing program 2 (id=3924): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000000740)=ANY=[@ANYBLOB="d105fbcb22cd7f52a49dd3d70f1df8e5859000895d067edbd48b3aeefacf9957c3c69bab042d920c96148c960ade23b61f92dc1e23c6386879b90bd46442f02d84e2b397a7e3f4dd4344727a0e571dd55d376094fa9131d7a258772fb51986130cc328be7c28a4", @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r0], 0xfd, 0x29f, &(0x7f0000000440)="$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") socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r6 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) shutdown(r6, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 4.828450391s ago: executing program 6 (id=3925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 4.66633522s ago: executing program 8 (id=3926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x88, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 4.621291772s ago: executing program 7 (id=3937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 3.747319423s ago: executing program 8 (id=3927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x18, 0x1, 0x70bd2c, 0x0, {0x17}}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2806, r3}, 0x94) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@chain) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000001e40)="d3", 0x1, 0x0, 0x0, 0x2}]) r8 = socket$kcm(0x21, 0x2, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 3.316954338s ago: executing program 6 (id=3929): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) 3.316392278s ago: executing program 7 (id=3930): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a", 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xff, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.053719163s ago: executing program 1 (id=3931): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r0, &(0x7f0000019340)='net/snmp6\x00') mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x9, 0xffffffffffffffff, 'id1\x00'}) ioctl$COMEDI_UNLOCK(r4, 0x6406) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x5a}, 0x28) 3.053449383s ago: executing program 2 (id=3932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ftruncate(0xffffffffffffffff, 0x8800000) socket$key(0xf, 0x3, 0x2) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.874378121s ago: executing program 8 (id=3933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000001040)=@known='system.sockprotoname\x00', &(0x7f0000001080)=""/5, 0x5) r3 = gettid() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) 1.825262604s ago: executing program 1 (id=3944): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) setpriority(0x2, 0x0, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xfce1) socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x6, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) 1.629453515s ago: executing program 7 (id=3934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x48) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0) r9 = socket(0x10, 0x803, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)={[0x0, &(0x7f0000000440)=':}\x00', &(0x7f0000000480)='(\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='syzkaller\x00']}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 1.628488215s ago: executing program 6 (id=3946): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca", 0x25) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x4, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) 67.535146ms ago: executing program 8 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$isdn(0x22, 0x3, 0x25) bind(r3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x1, 0xf8, 0x9}, 0x80) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0xf3, 0x3) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 4.558519ms ago: executing program 1 (id=3936): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x77bca45933760956}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @multicast1}}, [0x401, 0x7, 0x2bcd, 0x5, 0x2, 0x28e, 0x3, 0x3, 0x9476, 0xd99, 0xb, 0x8, 0x1, 0x7, 0x7]}, &(0x7f0000000180)=0x100) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file2\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@ssd}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@nodatasum}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x187842, 0x46) 0s ago: executing program 7 (id=3938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x88, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) kernel console output (not intermixed with test programs): se the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 293.070793][ T7989] CIFS mount error: No usable UNC path provided in device string! [ 293.070793][ T7989] [ 293.153801][ T7989] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.248737][ T8044] lo speed is unknown, defaulting to 1000 [ 296.768290][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 297.578248][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 298.560210][ T8081] sg_write: data in/out 16514940/1 bytes for SCSI command 0x1c-- guessing data in; [ 298.560210][ T8081] program syz.1.978 not setting count and/or reply_len properly [ 299.411562][ T8083] netlink: 'syz.3.979': attribute type 4 has an invalid length. [ 299.471280][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 300.810022][ T8119] xt_CONNSECMARK: invalid mode: 0 [ 301.527795][ T8121] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 301.704613][ T8126] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 301.726199][ T8127] device veth3 entered promiscuous mode [ 301.735330][ T8127] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 303.614287][ T8151] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.480652][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 304.760641][ T8166] xt_CONNSECMARK: invalid mode: 0 [ 305.550496][ T8172] loop5: detected capacity change from 0 to 4096 [ 306.863560][ T8188] lo speed is unknown, defaulting to 1000 [ 308.787791][ T8205] loop5: detected capacity change from 0 to 512 [ 309.126137][ T8209] overlayfs: failed to clone upperpath [ 309.325496][ T8216] loop5: detected capacity change from 0 to 2048 [ 309.387902][ T8216] loop5: p1 < > p4 [ 309.454087][ T8216] loop5: p4 size 722688 extends beyond EOD, truncated [ 309.581936][ T8220] xt_CONNSECMARK: invalid mode: 0 [ 311.258450][ T7973] udevd[7973]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 311.271749][ T8045] udevd[8045]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 311.352174][ T7973] udevd[7973]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 311.383493][ T8045] udevd[8045]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 314.886026][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 317.722924][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.732889][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.053112][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 318.053125][ T26] audit: type=1326 audit(2000000081.240:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 318.081687][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.648450][ T8305] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 319.669680][ T26] audit: type=1326 audit(2000000081.240:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 319.791590][ T26] audit: type=1326 audit(2000000081.240:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 319.813786][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.491760][ T26] audit: type=1326 audit(2000000081.240:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fe0cedad7 code=0x7ffc0000 [ 320.634181][ T26] audit: type=1326 audit(2000000081.240:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fe0c950d9 code=0x7ffc0000 [ 320.638115][ T8308] lo speed is unknown, defaulting to 1000 [ 320.661026][ T26] audit: type=1326 audit(2000000081.240:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 320.699877][ T26] audit: type=1326 audit(2000000081.240:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 320.731604][ T26] audit: type=1326 audit(2000000081.240:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 320.754220][ T26] audit: type=1326 audit(2000000081.240:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 320.777489][ T26] audit: type=1326 audit(2000000081.240:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8290 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6fe0cf3cb9 code=0x7ffc0000 [ 320.999049][ T8308] chnl_net:caif_netlink_parms(): no params data found [ 322.971270][ T4231] Bluetooth: hci5: command 0x0409 tx timeout [ 323.979484][ T4309] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 324.767701][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.820543][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.828619][ T8308] device bridge_slave_0 entered promiscuous mode [ 324.872102][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1059'. [ 324.969369][ T4309] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 324.988270][ T4309] usb 2-1: config 0 has no interface number 0 [ 324.998406][ T4309] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 325.046582][ T8308] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.054071][ T4231] Bluetooth: hci5: command 0x041b tx timeout [ 325.062241][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.089549][ T6538] IPVS: ip_vs_send_async error -101 [ 325.097366][ T8308] device bridge_slave_1 entered promiscuous mode [ 325.104939][ T4309] usb 2-1: string descriptor 0 read error: -71 [ 325.113544][ T4309] usb 2-1: New USB device found, idVendor=0489, idProduct=e0da, bcdDevice=a4.45 [ 325.146286][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.185841][ T4309] usb 2-1: config 0 descriptor?? [ 325.200004][ T8308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.239511][ T4309] usb 2-1: can't set config #0, error -71 [ 325.291607][ T4309] usb 2-1: USB disconnect, device number 5 [ 325.524384][ T8308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.610968][ T8308] team0: Port device team_slave_0 added [ 325.637005][ T8308] team0: Port device team_slave_1 added [ 325.684142][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 325.778809][ T8308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.797247][ T8308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.906115][ T8308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.932647][ T8308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.950282][ T8308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.021396][ T8308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.159560][ T8308] device hsr_slave_0 entered promiscuous mode [ 326.184796][ T8308] device hsr_slave_1 entered promiscuous mode [ 326.420924][ T8308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.428533][ T8308] Cannot create hsr debugfs directory [ 327.099312][ T4231] Bluetooth: hci5: command 0x040f tx timeout [ 328.643011][ T8308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.665256][ T8308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.685585][ T8308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.702436][ T8308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.923351][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.958183][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.973958][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.994251][ T8308] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.054048][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.072494][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.101792][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.108944][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.137185][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.157196][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.176124][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.185001][ T4309] Bluetooth: hci5: command 0x0419 tx timeout [ 329.201609][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.208748][ T7522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.261847][ T4486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.582310][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.614526][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.802401][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.201126][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.298115][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.311801][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.325420][ T4486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.390036][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.506196][ T8441] loop1: detected capacity change from 0 to 256 [ 331.496751][ T8444] xt_l2tp: missing protocol rule (udp|l2tpip) [ 331.521908][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.572562][ T8446] loop7: detected capacity change from 0 to 7 [ 331.593551][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.615743][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.626967][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 331.661184][ T8448] syz.5.1086 sent an empty control message without MSG_MORE. [ 331.671644][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.690501][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.701516][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 331.713723][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.724763][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 331.734855][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.754683][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.765655][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 331.775819][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.786792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 331.991769][ T4486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.180081][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.191099][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 332.378623][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.389703][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.365617][ T8446] ldm_validate_partition_table(): Disk read failed. [ 333.502211][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 333.513158][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.625006][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 333.635972][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.666081][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 333.677061][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 334.620018][ T8446] Dev loop7: unable to read RDB block 0 [ 334.654782][ T8446] loop7: unable to read partition table [ 334.678513][ T8446] loop7: partition table beyond EOD, truncated [ 334.711907][ T8446] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 334.795629][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.806827][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.487122][ T8308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.362479][ T8497] loop5: detected capacity change from 0 to 256 [ 338.216364][ T4486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.243578][ T8505] tipc: Resetting bearer [ 339.548183][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.567882][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.640622][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.654753][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.681303][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.690966][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.707152][ T8308] device veth0_vlan entered promiscuous mode [ 339.763871][ T8308] device veth1_vlan entered promiscuous mode [ 339.873025][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.883583][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 339.897672][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.917421][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.937541][ T8308] device veth0_macvtap entered promiscuous mode [ 340.692893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.706195][ T8308] device veth1_macvtap entered promiscuous mode [ 340.811542][ T8308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.843594][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.307607][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.546723][ T8308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.594563][ T8308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.642728][ T8308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.765824][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.794606][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.121905][ T8308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.593363][ T8308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.748436][ T8308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.863874][ T8308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.766387][ T8571] xt_policy: output policy not valid in PREROUTING and INPUT [ 344.476672][ T8575] Error parsing options; rc = [-22] [ 344.498470][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.699948][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.082079][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.350187][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.361140][ T4486] IPVS: stopping master sync thread 6538 ... [ 345.372649][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.414544][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.007740][ T8615] 9pnet: Insufficient options for proto=fd [ 348.488809][ T4486] device hsr_slave_0 left promiscuous mode [ 348.931889][ T4486] device hsr_slave_1 left promiscuous mode [ 349.089445][ T4486] device veth1_macvtap left promiscuous mode [ 349.168027][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 349.168045][ T26] audit: type=1326 audit(2000000112.300:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5979a0cb9 code=0x7fc00000 [ 349.196490][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.215385][ T4486] device veth0_macvtap left promiscuous mode [ 349.242651][ T4486] device veth1_vlan left promiscuous mode [ 349.267640][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 349.413639][ T4486] device veth0_vlan left promiscuous mode [ 350.833923][ T4486] bond2 (unregistering): Released all slaves [ 350.841462][ T7] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 350.854959][ T7] usb 2-1: config 0 has no interface number 0 [ 350.868709][ T7] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 350.897124][ T4486] bond1 (unregistering): Released all slaves [ 350.995530][ T7] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 351.004810][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.021281][ T7] usb 2-1: config 0 descriptor?? [ 351.039952][ T8631] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 351.060903][ T7] pl2303 2-1:0.183: required endpoints missing [ 351.155256][ T26] audit: type=1326 audit(2000000114.340:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x7fc00000 [ 351.177551][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.188385][ T26] audit: type=1326 audit(2000000114.380:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fe0cf3cb9 code=0x7fc00000 [ 351.833287][ T4257] usb 2-1: USB disconnect, device number 6 [ 352.524789][ T4486] bond0 (unregistering): Released all slaves [ 352.747179][ T8685] device syzkaller0 entered promiscuous mode [ 352.814473][ T8685] tipc: Started in network mode [ 352.829255][ T8685] tipc: Node identity fe27f00ea181, cluster identity 4711 [ 352.839719][ T8685] tipc: Enabled bearer , priority 0 [ 352.848107][ T8684] tipc: Resetting bearer [ 352.899541][ T8684] tipc: Disabling bearer [ 352.989668][ T8699] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 353.940733][ T26] audit: type=1326 audit(2000000117.130:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.5.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x7fc00000 [ 353.962902][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.938363][ T8738] loop6: detected capacity change from 0 to 256 [ 355.076388][ T8738] FAT-fs (loop6): Unrecognized mount option "smackfsroot=shortname=mixed" or missing value [ 358.506832][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1166'. [ 359.910949][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1166'. [ 360.843204][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1174'. [ 361.249281][ C0] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 361.249281][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 361.685895][ T8831] loop1: detected capacity change from 0 to 256 [ 361.736609][ T8827] device syzkaller0 entered promiscuous mode [ 361.807932][ T8840] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 361.830614][ T8840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.922562][ T8840] bond2: (slave veth5): Enslaving as an active interface with a down link [ 361.948506][ T8840] bond2: (slave dummy0): making interface the new active one [ 361.957489][ T8840] device dummy0 entered promiscuous mode [ 361.963607][ T8840] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 361.972691][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1181'. [ 362.012805][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.786614][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.864621][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 362.902582][ T8840] bond2 (unregistering): (slave veth5): Releasing active interface [ 362.918421][ T8840] bond2 (unregistering): (slave dummy0): Releasing active interface [ 362.942815][ T8840] bond2 (unregistering): Released all slaves [ 364.628995][ T8887] tipc: Started in network mode [ 364.634053][ T8887] tipc: Node identity 4, cluster identity 4711 [ 364.640276][ T8887] tipc: Node number set to 4 [ 366.091392][ T8914] gfs2: gfs2 mount does not exist [ 366.606689][ T8912] loop5: detected capacity change from 0 to 65536 [ 366.789458][ T8912] /dev/loop5: Can't open blockdev [ 367.879204][ T6141] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 368.720005][ T6141] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.177293][ T6141] usb 6-1: config 0 interface 0 has no altsetting 0 [ 369.216484][ T6141] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 369.235952][ T6141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.269671][ T6141] usb 6-1: config 0 descriptor?? [ 369.633226][ T8968] loop6: detected capacity change from 0 to 64 [ 370.171955][ T6141] kye 0003:0458:5015.0002: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 370.278717][ T26] audit: type=1800 audit(2000000133.450:74): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1205" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 370.369561][ T6141] kye 0003:0458:5015.0002: tablet-enabling feature report not found [ 370.464436][ T6141] kye 0003:0458:5015.0002: tablet enabling failed [ 370.804197][ T6141] usb 6-1: USB disconnect, device number 8 [ 371.260441][ T151] attempt to access beyond end of device [ 371.260441][ T151] loop6: rw=1, want=162, limit=64 [ 371.308164][ T8990] fido_id[8990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 371.334419][ T151] buffer_io_error: 10 callbacks suppressed [ 371.334433][ T151] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 371.352049][ T151] attempt to access beyond end of device [ 371.352049][ T151] loop6: rw=1, want=163, limit=64 [ 371.363152][ T151] Buffer I/O error on dev loop6, logical block 162, lost async page write [ 371.387476][ T151] attempt to access beyond end of device [ 371.387476][ T151] loop6: rw=1, want=164, limit=64 [ 371.403945][ T151] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 371.413029][ T151] attempt to access beyond end of device [ 371.413029][ T151] loop6: rw=1, want=168, limit=64 [ 372.210493][ T151] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 372.222901][ T9007] xt_policy: output policy not valid in PREROUTING and INPUT [ 372.521862][ T151] attempt to access beyond end of device [ 372.521862][ T151] loop6: rw=1, want=170, limit=64 [ 372.549197][ T151] Buffer I/O error on dev loop6, logical block 169, lost async page write [ 372.587588][ T151] attempt to access beyond end of device [ 372.587588][ T151] loop6: rw=1, want=172, limit=64 [ 372.634644][ T151] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 372.730393][ T151] attempt to access beyond end of device [ 372.730393][ T151] loop6: rw=1, want=173, limit=64 [ 372.741300][ T151] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 373.750255][ T151] attempt to access beyond end of device [ 373.750255][ T151] loop6: rw=1, want=174, limit=64 [ 373.769212][ T151] Buffer I/O error on dev loop6, logical block 173, lost async page write [ 373.814165][ T151] attempt to access beyond end of device [ 373.814165][ T151] loop6: rw=1, want=175, limit=64 [ 374.591625][ T151] Buffer I/O error on dev loop6, logical block 174, lost async page write [ 374.725652][ T151] attempt to access beyond end of device [ 374.725652][ T151] loop6: rw=1, want=176, limit=64 [ 374.751017][ T151] Buffer I/O error on dev loop6, logical block 175, lost async page write [ 376.927724][ T9075] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 377.169409][ T6141] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 377.559935][ T6141] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.598988][ T6141] usb 2-1: config 0 interface 0 has no altsetting 0 [ 377.606407][ T6141] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 377.645834][ T6141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.686559][ T6141] usb 2-1: config 0 descriptor?? [ 377.712318][ T9075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.970653][ T9105] tipc: Started in network mode [ 378.129594][ T9105] tipc: Node identity 080211000001, cluster identity 4711 [ 378.365563][ T9105] tipc: Enabled bearer , priority 0 [ 378.543267][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.613216][ T6141] kye 0003:0458:5015.0003: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 378.637840][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.644720][ T6141] kye 0003:0458:5015.0003: tablet-enabling feature report not found [ 378.653117][ T6141] kye 0003:0458:5015.0003: tablet enabling failed [ 378.674046][ T26] audit: type=1800 audit(2000000141.860:75): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1235" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 378.862712][ T9111] loop6: detected capacity change from 0 to 40427 [ 378.919002][ T9111] F2FS-fs (loop6): invalid crc value [ 379.060243][ T9111] F2FS-fs (loop6): Found nat_bits in checkpoint [ 379.136790][ T9111] F2FS-fs (loop6): Start checkpoint disabled! [ 379.166348][ T9111] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 379.199424][ T4257] usb 2-1: USB disconnect, device number 7 [ 379.216004][ T9125] fido_id[9125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 379.772319][ T3162] tipc: Node number set to 134418688 [ 380.474589][ T9146] lo speed is unknown, defaulting to 1000 [ 380.570292][ T9] handle_bad_sector: 7 callbacks suppressed [ 380.570310][ T9] attempt to access beyond end of device [ 380.570310][ T9] loop6: rw=2049, want=40976, limit=40427 [ 383.573263][ T9185] loop6: detected capacity change from 0 to 1024 [ 384.038024][ T9208] Invalid option length (1047662) for dns_resolver key [ 384.929760][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1270'. [ 386.529574][ T9239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 387.280614][ T9263] xt_policy: neither incoming nor outgoing policy selected [ 389.207700][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 389.702236][ T9305] loop5: detected capacity change from 0 to 64 [ 389.863506][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1294'. [ 390.088888][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 390.351136][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 390.553766][ T7] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 390.581520][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.247515][ T7] usb 7-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 391.279820][ T7] usb 7-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 391.466650][ T9342] loop5: detected capacity change from 0 to 16 [ 391.522799][ T9342] /dev/loop5: Can't open blockdev [ 391.609305][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.250889][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.264288][ T7] usb 7-1: Product: syz [ 392.268591][ T7] usb 7-1: Manufacturer: syz [ 392.275409][ T7] usb 7-1: SerialNumber: syz [ 392.412454][ T7] usb 7-1: can't set config #1, error -71 [ 392.427509][ T7] usb 7-1: USB disconnect, device number 2 [ 393.399758][ T9366] loop1: detected capacity change from 0 to 4096 [ 393.690426][ T9366] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 393.714703][ T9366] ntfs3: loop1: Failed to load $Extend. [ 393.851220][ T9391] fuse: Bad value for 'fd' [ 394.578954][ T9398] loop6: detected capacity change from 0 to 2048 [ 394.591138][ T9400] device syzkaller0 entered promiscuous mode [ 394.672918][ T9404] MPTCP: kernel_bind error, err=-98 [ 394.678171][ T9398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.775979][ T9408] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 394.801009][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 395.328114][ T9416] loop6: detected capacity change from 0 to 65536 [ 395.471056][ T9416] XFS (loop6): Mounting V5 Filesystem [ 395.587042][ T9416] XFS (loop6): Ending clean mount [ 396.018057][ T9440] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 396.882294][ T8308] XFS (loop6): Unmounting Filesystem [ 398.070296][ T9432] lo speed is unknown, defaulting to 1000 [ 399.604208][ T9485] loop5: detected capacity change from 0 to 256 [ 400.463343][ T9491] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 402.106605][ T9509] loop1: detected capacity change from 0 to 4096 [ 402.251214][ T9509] ntfs3: Unknown parameter 'nocase' [ 403.122014][ T9509] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 403.209537][ T9509] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 403.216342][ T9509] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 403.223138][ T9509] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 403.229937][ T9509] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 403.236649][ T9509] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 403.245038][ T9509] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 403.251984][ T9509] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 403.258954][ T9509] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 403.270188][ T9509] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 403.270558][ T9509] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 403.270794][ T9509] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 403.271396][ T9509] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 403.271525][ T9509] comedi comedi3: 8255: I/O port conflict (0x800061,4) [ 403.278793][ T9509] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 403.278866][ T9509] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 403.279054][ T9509] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 403.279746][ T9509] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 403.280010][ T9509] comedi comedi3: 8255: I/O port conflict (0x1000000,4) [ 403.280133][ T9509] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 404.227889][ T9527] lo speed is unknown, defaulting to 1000 [ 404.549226][ T4257] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 404.620370][ T9551] overlayfs: failed to clone upperpath [ 405.142186][ T4257] usb 6-1: config 0 has no interfaces? [ 406.051288][ T4257] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 406.063592][ T4257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.072039][ T4257] usb 6-1: Product: syz [ 406.076245][ T4257] usb 6-1: Manufacturer: syz [ 406.081365][ T4257] usb 6-1: SerialNumber: syz [ 406.119822][ T4257] usb 6-1: config 0 descriptor?? [ 406.881381][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 406.932550][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 407.022101][ T9527] device veth0_vlan left promiscuous mode [ 407.028355][ T9527] device veth0_vlan entered promiscuous mode [ 407.087084][ T9578] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.1358'. [ 407.118111][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 407.221813][ T9592] loop1: detected capacity change from 0 to 256 [ 407.274021][ T9592] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.357011][ T13] usb 6-1: USB disconnect, device number 9 [ 407.421971][ T9594] CIFS: iocharset name too long [ 408.049657][ T9527] syz.5.1347 (9527) used greatest stack depth: 19696 bytes left [ 411.756586][ T9628] xt_policy: neither incoming nor outgoing policy selected [ 413.633903][ T9643] device ip6gre1 entered promiscuous mode [ 413.786159][ T9649] lo speed is unknown, defaulting to 1000 [ 414.679985][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 415.199482][ T7] usb 7-1: config 0 has no interfaces? [ 416.099471][ T7] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 416.146961][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.155807][ T7] usb 7-1: Product: syz [ 416.160248][ T7] usb 7-1: Manufacturer: syz [ 416.164851][ T7] usb 7-1: SerialNumber: syz [ 416.171610][ T7] usb 7-1: config 0 descriptor?? [ 417.509306][ T4257] usb 7-1: USB disconnect, device number 3 [ 419.976904][ T9742] device syzkaller0 entered promiscuous mode [ 421.471006][ T9755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 421.720634][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 422.587965][ T9779] loop6: detected capacity change from 0 to 512 [ 425.192041][ T9779] FAT-fs (loop6): Unrecognized mount option "/dev/comedi5" or missing value [ 427.342378][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 427.931773][ T9852] netlink: zone id is out of range [ 428.093244][ T9852] netlink: zone id is out of range [ 428.207035][ T9852] netlink: zone id is out of range [ 428.239600][ T9852] netlink: zone id is out of range [ 428.251323][ T9854] loop5: detected capacity change from 0 to 128 [ 428.270379][ T9852] netlink: zone id is out of range [ 428.285096][ T9852] netlink: zone id is out of range [ 428.286673][ T9856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 428.303051][ T9852] netlink: zone id is out of range [ 428.338105][ T9852] netlink: zone id is out of range [ 428.395651][ T9852] netlink: zone id is out of range [ 428.449744][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.564788][ T9856] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 429.516440][ T9871] loop5: detected capacity change from 0 to 128 [ 429.904694][ T9871] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 429.933678][ T9870] attempt to access beyond end of device [ 429.933678][ T9870] loop5: rw=0, want=8767745, limit=128 [ 429.945398][ T9870] buffer_io_error: 6 callbacks suppressed [ 429.945417][ T9870] Buffer I/O error on dev loop5, logical block 8767744, async page read [ 429.959866][ T9870] attempt to access beyond end of device [ 429.959866][ T9870] loop5: rw=0, want=13269810, limit=128 [ 429.971243][ T9870] Buffer I/O error on dev loop5, logical block 13269809, async page read [ 429.979803][ T9870] attempt to access beyond end of device [ 429.979803][ T9870] loop5: rw=0, want=1158, limit=128 [ 429.990563][ T9870] Buffer I/O error on dev loop5, logical block 1157, async page read [ 429.998693][ T9870] attempt to access beyond end of device [ 429.998693][ T9870] loop5: rw=0, want=3211265, limit=128 [ 430.009901][ T9870] Buffer I/O error on dev loop5, logical block 3211264, async page read [ 430.018298][ T9870] attempt to access beyond end of device [ 430.018298][ T9870] loop5: rw=0, want=8768636, limit=128 [ 430.029340][ T9870] Buffer I/O error on dev loop5, logical block 8768635, async page read [ 430.038041][ T9870] attempt to access beyond end of device [ 430.038041][ T9870] loop5: rw=0, want=13466418, limit=128 [ 430.050665][ T9870] Buffer I/O error on dev loop5, logical block 13466417, async page read [ 430.059246][ T9870] attempt to access beyond end of device [ 430.059246][ T9870] loop5: rw=0, want=209286, limit=128 [ 430.071371][ T9870] Buffer I/O error on dev loop5, logical block 209285, async page read [ 430.080933][ T9870] attempt to access beyond end of device [ 430.080933][ T9870] loop5: rw=0, want=8767745, limit=128 [ 430.091992][ T9870] Buffer I/O error on dev loop5, logical block 8767744, async page read [ 430.104516][ T9870] attempt to access beyond end of device [ 430.104516][ T9870] loop5: rw=0, want=13269810, limit=128 [ 430.115811][ T9870] Buffer I/O error on dev loop5, logical block 13269809, async page read [ 430.124371][ T9870] attempt to access beyond end of device [ 430.124371][ T9870] loop5: rw=0, want=1158, limit=128 [ 430.135451][ T9870] Buffer I/O error on dev loop5, logical block 1157, async page read [ 430.179221][ T26] audit: type=1800 audit(2000000193.340:76): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1431" name="/" dev="loop5" ino=2 res=0 errno=0 [ 430.237091][ T9884] loop6: detected capacity change from 0 to 256 [ 430.252785][ T4501] sysv_free_block: trying to free block not in datazone [ 430.454868][ T4501] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 430.563190][ T9884] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.616201][ T4501] bio_check_ro: 5 callbacks suppressed [ 430.617120][ T4501] Trying to write to read-only block-device loop5 [ 430.795387][ T9884] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 430.871055][ T4501] Trying to write to read-only block-device loop5 [ 430.889449][ T9884] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 431.218452][ T9899] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.227409][ T9899] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.236293][ T9899] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.245062][ T9899] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.261763][ T9899] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 433.154582][ T9935] loop6: detected capacity change from 0 to 2048 [ 433.279915][ T9935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.429232][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1448'. [ 433.449032][ T9935] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1448'. [ 439.035287][ T26] audit: type=1326 audit(2000000202.220:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.5.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x0 [ 439.057159][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.327003][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1471'. [ 439.983202][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.082491][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.205872][T10048] netlink: 'syz.5.1476': attribute type 1 has an invalid length. [ 442.386010][T10048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.476841][T10051] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.609541][T10051] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.618275][T10051] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.724165][T10051] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.750984][T10051] bond1: (slave geneve2): making interface the new active one [ 442.775302][T10051] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 442.804525][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 445.033146][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 445.287835][T10107] device syzkaller0 entered promiscuous mode [ 446.006266][T10122] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 447.246338][ T4428] Bluetooth: hci5: command 0x0406 tx timeout [ 451.211447][T10189] Invalid ELF header magic: != ELF [ 452.274042][ T26] audit: type=1326 audit(2000000215.360:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.5.1514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fe0cf3cb9 code=0x0 [ 454.438042][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 454.623098][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1524'. [ 454.897960][T10242] netlink: 'syz.5.1527': attribute type 10 has an invalid length. [ 454.907475][T10242] team0: Port device netdevsim0 added [ 455.007520][T10248] binder: 10247:10248 ioctl 4018620d 0 returned -22 [ 455.017070][T10248] binder: 10247:10248 ioctl c0306201 0 returned -14 [ 455.666872][T10257] device team0 entered promiscuous mode [ 455.689673][T10257] device team_slave_0 entered promiscuous mode [ 455.697052][T10257] device team_slave_1 entered promiscuous mode [ 455.778569][T10257] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 455.804243][T10257] device macvlan3 entered promiscuous mode [ 455.813212][T10257] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 455.830408][T10258] bridge0: port 3(vlan4) entered blocking state [ 455.837395][T10258] bridge0: port 3(vlan4) entered disabled state [ 455.876130][T10258] device vlan4 entered promiscuous mode [ 456.753438][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 457.973307][T10281] netlink: 'syz.0.1541': attribute type 10 has an invalid length. [ 458.920992][T10281] team0: Port device netdevsim0 added [ 461.598870][T10334] sctp: [Deprecated]: syz.0.1552 (pid 10334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.598870][T10334] Use struct sctp_sack_info instead [ 462.624021][T10357] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 463.559671][T10362] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1561'. [ 463.795810][T10369] wlan0 speed is unknown, defaulting to 1000 [ 463.803997][T10369] wlan0 speed is unknown, defaulting to 1000 [ 463.814547][T10369] wlan0 speed is unknown, defaulting to 1000 [ 464.555298][T10369] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 464.624101][T10375] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 464.766400][T10369] wlan0 speed is unknown, defaulting to 1000 [ 464.880477][T10369] wlan0 speed is unknown, defaulting to 1000 [ 464.924321][T10369] wlan0 speed is unknown, defaulting to 1000 [ 464.976241][T10369] wlan0 speed is unknown, defaulting to 1000 [ 465.029486][T10369] wlan0 speed is unknown, defaulting to 1000 [ 469.288206][T10420] device syzkaller0 entered promiscuous mode [ 469.307091][ T4260] syzkaller0: tun_net_xmit 48 [ 469.318156][T10416] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 469.348118][T10420] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 469.419239][T10420] syzkaller0: tun_net_xmit 1280 [ 469.460962][T10420] syzkaller0: create flow: hash 2114993855 index 1 [ 470.065338][T10419] syzkaller0: delete flow: hash 2114993855 index 1 [ 471.051977][T10437] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 472.970039][T10462] loop5: detected capacity change from 0 to 1024 [ 474.188651][T10462] input: syz0 as /devices/virtual/input/input6 [ 474.231764][T10462] netlink: 'syz.5.1591': attribute type 4 has an invalid length. [ 474.369880][T10462] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1591'. [ 475.196292][T10487] overlayfs: failed to clone lowerpath [ 478.002366][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.761200][T10528] device syzkaller0 entered promiscuous mode [ 478.795870][ T26] audit: type=1326 audit(4147483889.988:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 479.349179][ T26] audit: type=1326 audit(4147483890.248:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 479.371540][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.397403][ T26] audit: type=1326 audit(4147483890.378:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 479.419871][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.631236][ T26] audit: type=1326 audit(4147483890.378:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 480.653500][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.750156][ T26] audit: type=1326 audit(4147483890.428:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 480.772469][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.792987][ T26] audit: type=1326 audit(4147483890.428:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 481.711772][ T26] audit: type=1326 audit(4147483890.428:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 481.734623][ T26] audit: type=1326 audit(4147483890.428:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 481.757108][ T26] audit: type=1326 audit(4147483890.498:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 481.784229][ T26] audit: type=1326 audit(4147483890.498:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f3531cb9 code=0x7ffc0000 [ 484.383964][T10585] rdma_op ffff88801d4719f0 conn xmit_rdma 0000000000000000 [ 488.477554][T10636] loop1: detected capacity change from 0 to 1024 [ 491.051435][T10655] sctp: [Deprecated]: syz.6.1641 (pid 10655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.051435][T10655] Use struct sctp_sack_info instead [ 491.399929][ T9] hfsplus: b-tree write err: -5, ino 3 [ 491.634062][T10636] hfsplus: node 4:3 still has 1 user(s)! [ 492.203653][T10669] loop5: detected capacity change from 0 to 32768 [ 492.439182][T10669] /dev/loop5: Can't open blockdev [ 493.854773][T10690] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 495.305978][T10705] netlink: 'syz.6.1658': attribute type 10 has an invalid length. [ 495.314001][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1658'. [ 495.326978][T10705] netlink: 'syz.6.1658': attribute type 10 has an invalid length. [ 495.530935][T10714] overlayfs: failed to clone lowerpath [ 496.253464][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1658'. [ 496.332814][T10719] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 496.628231][T10725] bond4: (slave bridge3): making interface the new active one [ 496.640079][T10729] loop6: detected capacity change from 0 to 256 [ 496.717595][T10725] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 497.119641][T10719] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 497.202269][T10729] FAT-fs (loop6): Directory bread(block 64) failed [ 497.208861][T10729] FAT-fs (loop6): Directory bread(block 65) failed [ 497.221409][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1667'. [ 497.282298][T10729] FAT-fs (loop6): Directory bread(block 66) failed [ 497.288898][T10729] FAT-fs (loop6): Directory bread(block 67) failed [ 497.308824][T10729] FAT-fs (loop6): Directory bread(block 68) failed [ 497.318689][T10729] FAT-fs (loop6): Directory bread(block 69) failed [ 497.325414][T10729] FAT-fs (loop6): Directory bread(block 70) failed [ 497.347499][T10729] FAT-fs (loop6): Directory bread(block 71) failed [ 497.364594][T10729] FAT-fs (loop6): Directory bread(block 72) failed [ 497.374594][T10729] FAT-fs (loop6): Directory bread(block 73) failed [ 497.424276][T10747] 9p filesystem being mounted at /359/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 497.441193][T10729] vfat filesystem being mounted at /83/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 500.441671][T10776] ip6t_REJECT: ECHOREPLY is not supported [ 501.410692][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.417188][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.397517][T10796] xt_cgroup: path and classid specified [ 504.933461][T10836] loop5: detected capacity change from 0 to 1024 [ 505.129586][T10844] netlink: 'syz.0.1694': attribute type 10 has an invalid length. [ 505.144776][T10844] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 505.221125][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 505.974305][T10846] device syzkaller0 entered promiscuous mode [ 506.030758][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 506.154220][T10857] IPv6: sit1: Disabled Multicast RS [ 506.695906][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1700'. [ 509.429885][T10898] tipc: Enabled bearer , priority 10 [ 509.852933][T10901] 9p filesystem being mounted at /374/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 511.191333][ T4260] tipc: Node number set to 1604775950 [ 511.419130][ T4428] Bluetooth: hci4: command 0x2016 tx timeout [ 512.393150][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 512.421946][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 512.501950][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 512.511369][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 512.519651][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 512.534053][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 512.721915][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 513.004482][T10939] netlink: 'syz.0.1722': attribute type 29 has an invalid length. [ 517.294496][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 519.553133][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 519.655546][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 519.773703][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 529.743107][T11097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1769'. [ 534.050527][T11139] print_req_error: 10 callbacks suppressed [ 534.050544][T11139] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.067985][T11139] F2FS-fs (loop11): Unable to read 1th superblock [ 534.074928][T11139] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.085968][T11139] F2FS-fs (loop11): Unable to read 2th superblock [ 535.041108][T11147] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 535.104373][T11148] netlink: 'syz.2.1780': attribute type 16 has an invalid length. [ 535.140927][T11148] netlink: 'syz.2.1780': attribute type 3 has an invalid length. [ 535.320225][T11148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1780'. [ 535.320658][ T3162] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 535.494858][ T3162] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 535.505328][ T3162] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 535.520557][ T3162] hid-generic 0003:0003:0000.0004: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 536.608265][T11158] fido_id[11158]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 537.693551][T11200] loop5: detected capacity change from 0 to 1024 [ 540.874785][ T3162] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 541.524823][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 541.575265][T11247] 9pnet: Insufficient options for proto=fd [ 541.645250][ T6141] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 541.726810][T11255] lo speed is unknown, defaulting to 1000 [ 541.750183][T11255] lo speed is unknown, defaulting to 1000 [ 541.758326][T11255] lo speed is unknown, defaulting to 1000 [ 542.152299][T11255] infiniband syz2: set down [ 542.157438][T11255] infiniband syz2: added lo [ 542.191241][ T7] lo speed is unknown, defaulting to 1000 [ 542.231212][ T6141] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 542.258819][ T3162] usb 6-1: Using ep0 maxpacket: 16 [ 542.276864][T11255] RDS/IB: syz2: added [ 542.282692][T11255] smc: adding ib device syz2 with port count 1 [ 542.289653][T11255] smc: ib device syz2 port 1 has pnetid [ 542.298423][T11255] lo speed is unknown, defaulting to 1000 [ 542.386445][T11255] lo speed is unknown, defaulting to 1000 [ 542.439378][ T3162] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 542.471633][T11255] lo speed is unknown, defaulting to 1000 [ 542.478433][ T3162] usb 6-1: config 0 has no interface number 0 [ 542.549222][ T3162] usb 6-1: config 0 interface 180 has no altsetting 0 [ 542.560073][T11255] lo speed is unknown, defaulting to 1000 [ 542.650446][T11255] lo speed is unknown, defaulting to 1000 [ 542.821862][ T6141] lo speed is unknown, defaulting to 1000 [ 543.037288][ T3162] usb 6-1: string descriptor 0 read error: -71 [ 543.049375][ T3162] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 543.058558][ T3162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.073320][ T3162] usb 6-1: config 0 descriptor?? [ 543.084497][T11267] fido_id[11267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 543.191015][T11272] No such timeout policy "syz0" [ 543.705842][ T3162] usb 6-1: can't set config #0, error -71 [ 543.750466][T11271] loop5: detected capacity change from 0 to 2048 [ 543.833425][ T3162] usb 6-1: USB disconnect, device number 10 [ 544.000324][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1815'. [ 547.215833][T11298] tipc: Enabled bearer , priority 0 [ 547.682784][T11317] UBIFS error (pid: 11317): cannot open "./file0", error -22 [ 548.829148][T11326] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.846157][T11326] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.855284][T11326] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.864187][T11326] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.316977][T11326] team0: Port device vxlan0 added [ 552.315267][T11382] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1848'. [ 552.374310][T11382] netlink: 'syz.0.1848': attribute type 12 has an invalid length. [ 552.513325][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 555.956319][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fc2c000: rx timeout, send abort [ 556.006748][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806068ec00: rx timeout, send abort [ 556.015558][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806068ec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.246999][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fc2c000: abort rx timeout. Force session deactivation [ 561.101252][T11478] netlink: 'syz.2.1876': attribute type 9 has an invalid length. [ 561.109254][T11478] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1876'. [ 562.004754][T11483] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 562.057034][T11483] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 562.069001][T11483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.069564][ T9] net_ratelimit: 29 callbacks suppressed [ 562.069574][ T9] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 562.100290][ T7534] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 562.732945][ T7510] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 562.879886][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.118034][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.700249][T11520] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 566.638950][T11528] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 568.607884][T11550] bridge0: port 3(vxlan0) entered blocking state [ 568.649578][T11550] bridge0: port 3(vxlan0) entered disabled state [ 568.689701][T11550] device vxlan0 entered promiscuous mode [ 571.571000][T11571] loop6: detected capacity change from 0 to 8 [ 572.239269][T11571] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 572.249965][T11490] udevd[11490]: incorrect cramfs checksum on /dev/loop6 [ 572.359966][T11571] cramfs: Error -3 while decompressing! [ 572.366099][T11571] cramfs: ffffffff964000a8(26)->ffff888046eee000(4096) [ 572.373191][T11571] cramfs: Error 2 while decompressing! [ 572.378701][T11571] cramfs: ffffffff964000c2(26)->ffff8880445d3000(4096) [ 572.385903][T11571] cramfs: Error -3 while decompressing! [ 572.391541][T11571] cramfs: ffffffff964000dc(16)->ffff8880445dd000(4096) [ 572.402348][T11571] cramfs: Error -3 while decompressing! [ 572.408066][T11571] cramfs: ffffffff964000a8(26)->ffff888046eee000(4096) [ 572.415764][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 572.415776][ T26] audit: type=1800 audit(4147484239.612:108): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1898" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 572.559708][T11490] udevd[11490]: incorrect cramfs checksum on /dev/loop6 [ 572.792611][T11490] udevd[11490]: incorrect cramfs checksum on /dev/loop6 [ 572.890895][T11583] netlink: 'syz.2.1901': attribute type 4 has an invalid length. [ 572.898712][T11583] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1901'. [ 572.919384][T11583] wlan1: mtu less than device minimum [ 575.320634][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'. [ 575.329777][T11597] netlink: del zone limit has 8 unknown bytes [ 580.405769][T11642] netlink: 'syz.5.1914': attribute type 4 has an invalid length. [ 580.413640][T11642] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1914'. [ 586.710577][T11693] loop6: detected capacity change from 0 to 512 [ 586.767827][T11693] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 587.319396][T11693] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 587.475340][T11693] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 587.609423][T11693] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 587.654412][T11693] EXT4-fs (loop6): 1 truncate cleaned up [ 587.886715][T11693] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 594.823340][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 594.832252][T11756] netlink: set zone limit has 8 unknown bytes [ 595.863195][T11774] syz.5.1948 (11774) used greatest stack depth: 18096 bytes left [ 595.931528][T11783] IPVS: Error joining to the multicast group [ 597.187010][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1953'. [ 599.308007][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 600.625354][T11823] delete_channel: no stack [ 601.479559][T11818] loop6: detected capacity change from 0 to 1024 [ 607.547863][T11887] netlink: 'syz.2.1973': attribute type 10 has an invalid length. [ 607.592802][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1973'. [ 616.908343][T12004] device syzkaller0 entered promiscuous mode [ 623.516019][T12070] loop6: detected capacity change from 0 to 32768 [ 624.266622][T12070] jfs filesystem being mounted at /138/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 624.345524][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.352156][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.600418][T12087] capability: warning: `syz.6.2023' uses 32-bit capabilities (legacy support in use) [ 625.615141][T12098] UBIFS error (pid: 12098): cannot open "./file0", error -22 [ 628.933832][T12125] netlink: 'syz.5.2034': attribute type 10 has an invalid length. [ 628.993120][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 629.031623][T12125] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.639786][T12156] UBIFS error (pid: 12156): cannot open "./file0", error -22 [ 631.711045][T12176] device ipip0 left promiscuous mode [ 631.724427][T12176] device veth3 left promiscuous mode [ 631.731440][T12176] device ip6gre1 left promiscuous mode [ 632.844498][T12191] xt_connbytes: Forcing CT accounting to be enabled [ 632.851581][T12191] Cannot find set identified by id 0 to match [ 634.063149][T12194] netlink: 'syz.1.2051': attribute type 10 has an invalid length. [ 635.759905][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'. [ 637.587372][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 637.598979][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 637.611805][T12229] device dummy0 entered promiscuous mode [ 637.835169][T12235] tipc: Enabled bearer , priority 0 [ 637.850869][T12235] device syzkaller0 entered promiscuous mode [ 640.377002][T12235] tipc: Resetting bearer [ 640.394621][T12230] tipc: Resetting bearer [ 640.435363][T12230] tipc: Disabling bearer [ 642.133851][T12271] UBIFS error (pid: 12271): cannot open "./file0", error -22 [ 643.931142][T12277] tipc: Enabling of bearer rejected, failed to enable media [ 644.911929][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.920733][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.931278][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.942966][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.951241][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.959450][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.967686][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 644.979276][T12291] netlink: 'syz.2.2077': attribute type 29 has an invalid length. [ 645.453063][T12301] No such timeout policy "syz0" [ 646.630956][T12309] delete_channel: no stack [ 647.501864][T12329] tipc: Enabling of bearer rejected, failed to enable media [ 647.862948][T12340] netlink: 'syz.6.2087': attribute type 10 has an invalid length. [ 648.495531][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2091'. [ 648.520722][T12340] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 648.676425][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 648.732126][T12361] 9pnet: Insufficient options for proto=fd [ 649.792457][T12386] tipc: Enabled bearer , priority 0 [ 649.841269][T12386] device syzkaller0 entered promiscuous mode [ 649.976609][T12389] tipc: Enabling of bearer rejected, already enabled [ 650.007525][T12383] tipc: Resetting bearer [ 650.614565][T12383] tipc: Disabling bearer [ 652.316645][T12417] tipc: Enabling of bearer rejected, already enabled [ 653.414018][T12432] device syzkaller0 entered promiscuous mode [ 653.555333][T12432] TC_ACT_REPEAT abuse ? [ 654.612567][T12444] netlink: 856 bytes leftover after parsing attributes in process `syz.0.2120'. [ 655.590522][T12467] tipc: Enabling of bearer rejected, already enabled [ 657.920504][T12491] mmap: syz.6.2132 (12491) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 657.989008][T12491] loop6: detected capacity change from 0 to 64 [ 658.271091][T12497] overlayfs: failed to clone upperpath [ 659.688941][T12509] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 664.297977][T12542] No such timeout policy "syz1" [ 665.341783][ T26] audit: type=1326 audit(4147484332.419:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 665.570104][ T4260] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 665.611636][ T26] audit: type=1326 audit(4147484332.419:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 665.634061][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.684314][ T26] audit: type=1326 audit(4147484332.429:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 665.706843][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.796930][ T26] audit: type=1326 audit(4147484332.439:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 666.728439][ T26] audit: type=1326 audit(4147484332.439:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 667.006062][ T26] audit: type=1326 audit(4147484332.439:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 667.007626][T12572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.028773][ T4260] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.048745][ T26] audit: type=1326 audit(4147484332.439:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 667.055841][T12576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.072564][ T4260] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 667.095783][ T26] audit: type=1326 audit(4147484332.439:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 667.124885][ T4260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.154036][ T26] audit: type=1326 audit(4147484332.439:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 667.176589][ T4260] usb 7-1: config 0 descriptor?? [ 667.185002][ T26] audit: type=1326 audit(4147484332.439:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 667.231404][ T4260] pwc: Askey VC010 type 2 USB webcam detected. [ 668.150474][ T4260] pwc: recv_control_msg error -32 req 02 val 2b00 [ 668.335612][ T4260] pwc: recv_control_msg error -32 req 02 val 2700 [ 670.212438][ T4260] pwc: recv_control_msg error -32 req 02 val 2c00 [ 670.397824][ T4260] pwc: recv_control_msg error -71 req 04 val 1000 [ 670.431269][ T4260] pwc: recv_control_msg error -71 req 04 val 1300 [ 671.981372][ T4260] pwc: recv_control_msg error -71 req 04 val 1400 [ 672.005824][ T4260] pwc: recv_control_msg error -71 req 02 val 2000 [ 672.196335][ T4260] pwc: recv_control_msg error -71 req 02 val 2100 [ 672.241009][ T4260] pwc: recv_control_msg error -71 req 04 val 1500 [ 672.337448][T12638] Option '2 O€ÉÇ—Wz [ 672.337448][T12638] ­ f:ó–ã5úÉùÔAŠÀ- [ 672.337448][T12638] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 672.743877][ T4260] pwc: recv_control_msg error -71 req 02 val 2500 [ 673.021396][ T4260] pwc: recv_control_msg error -71 req 02 val 2400 [ 673.042925][ T4260] pwc: recv_control_msg error -71 req 02 val 2600 [ 673.684899][T12646] loop6: detected capacity change from 0 to 32768 [ 673.701690][ T4260] pwc: recv_control_msg error -71 req 02 val 2900 [ 673.760494][T12646] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 673.769244][T12646] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 673.845225][T12654] tipc: Enabling of bearer rejected, already enabled [ 673.868529][ T4260] pwc: recv_control_msg error -71 req 02 val 2800 [ 673.899185][T12646] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 673.914164][ T4257] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 673.931434][ T4257] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 674.436035][ T4260] pwc: recv_control_msg error -71 req 04 val 1100 [ 674.518066][ T4260] pwc: recv_control_msg error -71 req 04 val 1200 [ 674.564317][ T4260] pwc: Registered as video103. [ 674.585846][ T4260] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 674.727907][ T4260] usb 7-1: USB disconnect, device number 4 [ 675.185674][ T4257] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1173ms [ 675.289093][ T4257] gfs2: fsid=syz:syz.0: jid=0: Done [ 675.298742][T12646] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 678.156194][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.159247][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 678.162749][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 678.164775][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 678.166614][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 678.168116][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 678.169778][T12704] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 682.938648][T12742] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 683.067759][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2200'. [ 683.078588][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2200'. [ 683.234636][T12749] loop6: detected capacity change from 0 to 1024 [ 684.531465][T12749] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 684.542606][T12749] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.176078][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.183715][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.997054][T12775] overlayfs: failed to clone upperpath [ 688.509038][T12789] tipc: Enabling of bearer rejected, already enabled [ 688.575909][T12789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2210'. [ 689.013010][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2215'. [ 689.032490][T12803] device bond_slave_0 entered promiscuous mode [ 689.038767][T12803] device bond_slave_1 entered promiscuous mode [ 689.045003][T12803] device wlan1 entered promiscuous mode [ 689.054669][T12803] device macvtap1 entered promiscuous mode [ 689.061193][T12803] device bond0 entered promiscuous mode [ 689.068915][T12803] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 689.094439][T12805] device bond0 left promiscuous mode [ 689.100297][T12805] device bond_slave_0 left promiscuous mode [ 689.106244][T12805] device bond_slave_1 left promiscuous mode [ 689.112222][T12805] device wlan1 left promiscuous mode [ 690.706414][T12826] xt_recent: Unsupported userspace flags (000000de) [ 693.670382][T12852] siw: device registration error -23 [ 697.345595][T12903] Option '2 O€ÉÇ—Wz [ 697.345595][T12903] ­ f:ó–ã5úÉùÔAŠÀ- [ 697.345595][T12903] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 699.609551][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'. [ 700.988532][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2249'. [ 701.004792][T12935] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 701.027116][T12940] tipc: Enabling of bearer rejected, already enabled [ 701.037914][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 701.045422][T12935] exFAT-fs (loop6): unable to read boot sector [ 701.074734][T12935] exFAT-fs (loop6): failed to read boot sector [ 701.087802][T12935] exFAT-fs (loop6): failed to recognize exfat type [ 705.370380][T12974] loop6: detected capacity change from 0 to 512 [ 706.707146][T12974] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2259: inode has both inline data and extents flags [ 706.750618][T12974] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2259: couldn't read orphan inode 15 (err -117) [ 706.993790][T12974] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 716.103832][T13035] Process accounting resumed [ 717.453988][T13076] device syzkaller0 entered promiscuous mode [ 718.160514][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2297'. [ 718.222495][T13085] device ip6gretap0 entered promiscuous mode [ 718.270015][T13085] device macvtap1 entered promiscuous mode [ 718.297358][T13086] device ip6gretap0 left promiscuous mode [ 722.061866][T13118] tipc: Enabled bearer , priority 0 [ 722.081491][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2293'. [ 724.362409][ T4265] tipc: Node number set to 4269801494 [ 725.997716][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 726.212186][T13153] device ip6gretap0 entered promiscuous mode [ 726.229681][T13153] device macvtap1 entered promiscuous mode [ 726.265180][T13154] device ip6gretap0 left promiscuous mode [ 726.284961][T13157] delete_channel: no stack [ 731.437499][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 731.456408][T13194] device macvtap1 entered promiscuous mode [ 731.462719][T13194] device ip6gretap0 entered promiscuous mode [ 731.482295][T13194] device ip6gretap0 left promiscuous mode [ 732.745052][T13222] delete_channel: no stack [ 734.525017][T13245] tipc: Enabling of bearer rejected, already enabled [ 734.846145][T13249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2328'. [ 739.740144][T13297] tipc: Enabling of bearer rejected, already enabled [ 743.812358][T13346] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 748.743324][T13389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 752.840297][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.846913][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.827486][T13930] siw: device registration error -23 [ 773.714592][T13970] loop6: detected capacity change from 0 to 512 [ 773.830195][T13970] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 783.893022][T14064] tipc: Enabling of bearer rejected, already enabled [ 788.471741][T14108] device syzkaller0 entered promiscuous mode [ 796.499070][T14198] netlink: 'syz.5.2498': attribute type 1 has an invalid length. [ 799.026798][T14224] netlink: 'syz.1.2490': attribute type 3 has an invalid length. [ 799.857024][T14243] device syzkaller0 entered promiscuous mode [ 800.415822][T14253] netlink: 'syz.1.2503': attribute type 1 has an invalid length. [ 812.900030][T14651] device syzkaller0 entered promiscuous mode [ 812.917827][T14651] TC_ACT_REPEAT abuse ? [ 813.341674][T14661] overlayfs: failed to clone upperpath [ 816.800534][T14238] Set syz1 is full, maxelem 65536 reached [ 817.979645][T14721] lo speed is unknown, defaulting to 1000 [ 817.987211][T14721] wlan0 speed is unknown, defaulting to 1000 [ 817.995605][T14721] lo speed is unknown, defaulting to 1000 [ 819.347304][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.353659][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.441155][ T3162] Bluetooth: hci0: command 0x0409 tx timeout [ 822.510869][T14746] siw: device registration error -23 [ 823.943035][T14764] SET target dimension over the limit! [ 824.667759][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 824.767517][T14721] chnl_net:caif_netlink_parms(): no params data found [ 824.841767][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 825.715172][T14786] loop6: detected capacity change from 0 to 8 [ 826.902492][T14786] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 826.921731][T14750] udevd[14750]: incorrect cramfs checksum on /dev/loop6 [ 826.930936][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 826.969959][T14784] cramfs: Error -3 while decompressing! [ 826.975578][T14784] cramfs: ffffffff964040a8(26)->ffff888046fcc000(4096) [ 826.982691][T14784] cramfs: Error 2 while decompressing! [ 826.988312][T14784] cramfs: ffffffff964040c2(26)->ffff888052b20000(4096) [ 826.995428][T14784] cramfs: Error -3 while decompressing! [ 827.000990][T14784] cramfs: ffffffff964040dc(16)->ffff888052b21000(4096) [ 827.007860][T14784] cramfs: Error -3 while decompressing! [ 827.013424][T14784] cramfs: ffffffff964040a8(26)->ffff888046fcc000(4096) [ 827.022967][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 827.022980][ T26] audit: type=1800 audit(894.544:126): pid=14784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2568" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 827.030919][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.208435][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.217875][T14721] device bridge_slave_0 entered promiscuous mode [ 827.226949][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.297588][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.658966][T14721] device bridge_slave_1 entered promiscuous mode [ 827.675990][T14750] udevd[14750]: incorrect cramfs checksum on /dev/loop6 [ 827.696215][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.711702][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.747393][T14721] team0: Port device team_slave_0 added [ 827.757780][T14721] team0: Port device team_slave_1 added [ 828.836845][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.937188][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.200661][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 829.470073][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.728014][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.837632][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.869138][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.814836][T14826] loop6: detected capacity change from 0 to 512 [ 830.843859][T14721] device hsr_slave_0 entered promiscuous mode [ 830.867954][T14721] device hsr_slave_1 entered promiscuous mode [ 830.883414][T14721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.941519][T14721] Cannot create hsr debugfs directory [ 831.091590][T14826] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 833.941886][T14846] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 834.490508][T14721] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 834.550903][T14860] netlink: 'syz.1.2586': attribute type 10 has an invalid length. [ 834.574513][T14721] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 834.629802][T14721] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 834.714614][T14721] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 834.976573][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.000474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 835.010724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 835.084554][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.119486][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 835.128518][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 835.137058][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.144172][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.161190][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 835.169306][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 835.178308][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 835.186610][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.193705][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.201428][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 835.217322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 835.229117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 835.238295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 835.247305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 835.258050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 835.267358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 835.278793][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 835.287370][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 835.298956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 835.307762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 835.318900][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 835.395080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.402918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 835.416168][T14721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.515112][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 835.523864][ T7522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 835.541449][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 835.549808][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 835.558582][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 835.567102][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 835.577931][T14721] device veth0_vlan entered promiscuous mode [ 835.590676][T14721] device veth1_vlan entered promiscuous mode [ 835.610322][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 835.619124][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 835.628423][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 835.637351][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 835.648436][T14721] device veth0_macvtap entered promiscuous mode [ 835.657095][T14721] device veth1_macvtap entered promiscuous mode [ 835.672837][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.683818][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.695025][T14721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.703094][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 835.713678][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 835.722781][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 835.731562][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 835.742632][T14721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.754305][T14721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.765700][T14721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.773646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 835.782596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 835.793453][T14721] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.802714][T14721] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.811940][T14721] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.820933][T14721] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.880651][ T7522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.895624][ T7522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.909682][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.912587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 835.920168][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.938207][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 836.019058][T14893] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2545'. [ 838.565003][T14933] orangefs_mount: mount request failed with -4 [ 842.024470][T14946] loop7: detected capacity change from 0 to 8 [ 842.053542][T14946] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 842.201112][T14750] udevd[14750]: incorrect cramfs checksum on /dev/loop7 [ 842.223659][T14946] cramfs: Error -3 while decompressing! [ 842.229373][T14946] cramfs: ffffffff964000a8(26)->ffff8880724a2000(4096) [ 842.236525][T14946] cramfs: Error 2 while decompressing! [ 842.242034][T14946] cramfs: ffffffff964000c2(26)->ffff8880724a3000(4096) [ 842.249144][T14946] cramfs: Error -3 while decompressing! [ 842.254959][T14946] cramfs: ffffffff964000dc(16)->ffff888048fd8000(4096) [ 842.262231][T14946] cramfs: Error -3 while decompressing! [ 842.267871][T14946] cramfs: ffffffff964000a8(26)->ffff8880724a2000(4096) [ 842.922152][ T26] audit: type=1800 audit(909.416:127): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2596" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 843.671312][T14750] udevd[14750]: incorrect cramfs checksum on /dev/loop7 [ 844.849211][T14989] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 845.045594][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2608'. [ 847.832052][T15015] delete_channel: no stack [ 850.348830][T15038] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 850.392376][T15040] netlink: 'syz.6.2625': attribute type 1 has an invalid length. [ 850.636612][T15042] loop7: detected capacity change from 0 to 128 [ 851.255575][T15043] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 851.264890][T15043] FAT-fs (loop7): Filesystem has been set read-only [ 851.325497][ T26] audit: type=1800 audit(917.208:128): pid=15043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2626" name="file2" dev="loop7" ino=1048611 res=0 errno=0 [ 851.353480][ C0] vkms_vblank_simulate: vblank timer overrun [ 855.975541][T15065] Unknown metaid 34525 dlen 0 [ 861.396045][T15116] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 862.670727][T15139] netlink: 'syz.6.2653': attribute type 1 has an invalid length. [ 865.230080][T15177] loop6: detected capacity change from 0 to 64 [ 865.356073][T15177] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 866.428176][ T26] audit: type=1326 audit(931.408:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.044690][ T26] audit: type=1326 audit(931.978:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.066936][ T26] audit: type=1326 audit(931.978:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.091454][ T26] audit: type=1326 audit(931.978:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.135075][ T26] audit: type=1326 audit(931.988:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.157198][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.179393][ T26] audit: type=1326 audit(931.988:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.207486][ T26] audit: type=1326 audit(931.988:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.239792][ T26] audit: type=1326 audit(931.988:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.278968][ T26] audit: type=1326 audit(931.988:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 867.335748][ T26] audit: type=1326 audit(931.988:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b65461cb9 code=0x7ffc0000 [ 869.278466][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 869.754538][T15248] loop7: detected capacity change from 0 to 2048 [ 870.868625][T15248] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,,errors=continue. Quota mode: none. [ 872.308015][T15275] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2686'. [ 872.814010][T15263] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 321: padding at end of block bitmap is not set [ 875.774656][T15304] loop7: detected capacity change from 0 to 256 [ 875.793448][T15305] loop6: detected capacity change from 0 to 8 [ 877.357793][T15305] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 877.383303][T15305] cramfs: Error -3 while decompressing! [ 877.388896][T15305] cramfs: ffffffff964040a8(26)->ffff88804578d000(4096) [ 877.395937][T15305] cramfs: Error 2 while decompressing! [ 877.401402][T15305] cramfs: ffffffff964040c2(26)->ffff88804578e000(4096) [ 877.408286][T15305] cramfs: Error -3 while decompressing! [ 877.413813][T15305] cramfs: ffffffff964040dc(16)->ffff88804578f000(4096) [ 877.420738][T15305] cramfs: Error -3 while decompressing! [ 877.426278][T15305] cramfs: ffffffff964040a8(26)->ffff88804578d000(4096) [ 877.433346][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 877.433357][ T26] audit: type=1800 audit(941.697:144): pid=15305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2698" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 877.463728][T15073] udevd[15073]: incorrect cramfs checksum on /dev/loop6 [ 877.486062][T15304] FAT-fs (loop7): Directory bread(block 64) failed [ 877.503885][T15304] FAT-fs (loop7): Directory bread(block 65) failed [ 877.510572][T15304] FAT-fs (loop7): Directory bread(block 66) failed [ 878.456158][T15062] udevd[15062]: incorrect cramfs checksum on /dev/loop6 [ 878.513000][T15304] FAT-fs (loop7): Directory bread(block 67) failed [ 878.520268][T15304] FAT-fs (loop7): Directory bread(block 68) failed [ 878.527377][T15304] FAT-fs (loop7): Directory bread(block 69) failed [ 878.533970][T15304] FAT-fs (loop7): Directory bread(block 70) failed [ 878.559018][T15304] FAT-fs (loop7): Directory bread(block 71) failed [ 878.565687][T15304] FAT-fs (loop7): Directory bread(block 72) failed [ 878.596090][T15304] FAT-fs (loop7): Directory bread(block 73) failed [ 879.163507][T15317] handle_bad_sector: 4 callbacks suppressed [ 879.163544][T15317] attempt to access beyond end of device [ 879.163544][T15317] loop7: rw=2051, want=1256, limit=256 [ 883.236064][T15363] tipc: Enabling of bearer rejected, failed to enable media [ 884.657485][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 884.674750][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.471305][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2720'. [ 886.445614][T15406] loop7: detected capacity change from 0 to 256 [ 888.753140][T15406] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 889.507992][T15406] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 890.243410][T15430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 894.633053][T15478] loop7: detected capacity change from 0 to 2048 [ 895.184425][T15478] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 895.195137][T15478] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 895.267096][T15478] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 895.362387][T15478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.294052][T15498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2743'. [ 899.145978][T15519] device syzkaller0 entered promiscuous mode [ 899.623461][T15531] xt_hashlimit: max too large, truncated to 1048576 [ 902.954740][T15561] tipc: Enabling of bearer rejected, already enabled [ 903.629422][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 906.654143][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2772'. [ 907.492442][T15622] kAFS: unable to lookup cell '' [ 907.550783][T15623] tipc: Enabling of bearer rejected, already enabled [ 907.741107][T15629] ipt_CLUSTERIP: no such interface batadv_slave_1 [ 910.910287][T15665] ceph: No source [ 912.494055][T15675] loop7: detected capacity change from 0 to 2048 [ 912.819474][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2792'. [ 912.956346][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2792'. [ 913.437123][T15675] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,,errors=continue. Quota mode: none. [ 913.652582][T15676] ceph: No mds server is up or the cluster is laggy [ 915.019395][T15710] device vlan2 entered promiscuous mode [ 915.075574][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2798'. [ 915.263977][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2798'. [ 918.489843][T15743] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 918.490185][T15743] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 922.154622][T15791] team0: Device gtp0 is of different type [ 925.228207][T15829] device syzkaller0 entered promiscuous mode [ 928.591963][T15866] blktrace: Concurrent blktraces are not allowed on loop0 [ 933.428444][T15942] x_tables: ip_tables: osf match: only valid for protocol 6 [ 937.927390][T15987] syz.2.2866 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 940.563604][T16018] netlink: 'syz.0.2874': attribute type 1 has an invalid length. [ 942.802122][T16031] x_tables: duplicate underflow at hook 1 [ 945.286390][T16047] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2885'. [ 950.052568][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 950.059181][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 951.068549][T16089] loop7: detected capacity change from 0 to 64 [ 951.230460][T16089] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 952.695971][ T3162] Bluetooth: hci0: command 0x0406 tx timeout [ 957.017568][T16166] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2918'. [ 957.622387][T16180] tipc: Enabling of bearer rejected, already enabled [ 961.474422][T16226] device syzkaller0 entered promiscuous mode [ 961.917525][T16238] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 963.987057][T16260] netlink: 'syz.6.2947': attribute type 16 has an invalid length. [ 963.995014][T16260] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2947'. [ 967.196540][T16292] loop7: detected capacity change from 0 to 512 [ 967.439137][T16292] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 969.615283][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'. [ 969.826533][T16336] x_tables: ip_tables: osf match: only valid for protocol 6 [ 970.997973][T16347] device batadv_slave_0 entered promiscuous mode [ 974.530658][T16400] x_tables: ip_tables: osf match: only valid for protocol 6 [ 975.400330][T16402] block device autoloading is deprecated and will be removed. [ 975.898396][T16409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.906279][T16409] device batadv_slave_0 entered promiscuous mode [ 979.224065][T16457] x_tables: ip_tables: osf match: only valid for protocol 6 [ 985.123437][T16512] loop7: detected capacity change from 0 to 1024 [ 989.694179][T16551] loop7: detected capacity change from 0 to 2048 [ 990.120407][T16551] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,,errors=continue. Quota mode: none. [ 990.233877][T16548] overlayfs: failed to clone upperpath [ 991.024832][T16559] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 321: padding at end of block bitmap is not set [ 992.100572][T16577] rdma_rxe: rxe_register_device failed with error -23 [ 992.142222][T16577] rdma_rxe: failed to add lo [ 993.003050][T16603] netlink: 'syz.2.3035': attribute type 21 has an invalid length. [ 993.011011][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'. [ 996.042664][T16618] loop7: detected capacity change from 0 to 512 [ 997.467932][T16618] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1001.227304][T16671] loop7: detected capacity change from 0 to 8 [ 1001.327290][T16671] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1001.342277][T16615] udevd[16615]: incorrect cramfs checksum on /dev/loop7 [ 1001.351731][T16669] cramfs: Error -3 while decompressing! [ 1001.357286][T16669] cramfs: ffffffff964000a8(26)->ffff88804562a000(4096) [ 1001.494577][T16669] cramfs: Error 2 while decompressing! [ 1001.500657][T16669] cramfs: ffffffff964000c2(26)->ffff88805c3ba000(4096) [ 1001.510128][T16669] cramfs: Error -3 while decompressing! [ 1001.519220][T16669] cramfs: ffffffff964000dc(16)->ffff888075c41000(4096) [ 1001.536263][T16669] cramfs: Error -3 while decompressing! [ 1001.543297][T16669] cramfs: ffffffff964000a8(26)->ffff88804562a000(4096) [ 1002.828568][ T26] audit: type=1800 audit(1058.996:145): pid=16669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3053" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 1008.757176][T16726] loop7: detected capacity change from 0 to 4096 [ 1008.798205][T16726] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 1014.612481][T16784] loop7: detected capacity change from 0 to 512 [ 1015.599603][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1015.606034][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1015.989129][T16784] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1016.295652][T16784] EXT4-fs (loop7): re-mounted. Opts: . Quota mode: writeback. [ 1016.556886][T16800] overlayfs: failed to clone upperpath [ 1018.421689][ T26] audit: type=1800 audit(1073.551:146): pid=16815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3092" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1024.583471][T16884] device bridge0 entered promiscuous mode [ 1030.377187][T16948] overlayfs: failed to clone upperpath [ 1041.092370][T17070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.791233][T17177] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1050.210704][T17179] overlayfs: failed to clone upperpath [ 1055.749130][T17242] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1056.554061][T17234] autofs4:pid:17234:autofs_fill_super: called with bogus options [ 1058.763150][T17285] tipc: Enabling of bearer rejected, failed to enable media [ 1061.831040][T17317] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 1063.191564][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.202549][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.213364][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.224129][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.235109][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.246719][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.257564][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.268360][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.279141][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.289941][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1063.303163][T17333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1066.694852][T17375] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1066.813215][T17376] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 1067.988407][T17392] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1068.564558][T17398] IPv6: NLM_F_CREATE should be specified when creating new route [ 1070.497102][T17423] overlayfs: failed to clone lowerpath [ 1073.554907][T17454] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1078.904241][T17507] tipc: Enabling of bearer rejected, failed to enable media [ 1078.940531][T17507] tipc: Enabled bearer , priority 10 [ 1081.028946][T17555] delete_channel: no stack [ 1081.034216][T17555] delete_channel: no stack [ 1081.245405][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1081.251728][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.176667][T17660] __nla_validate_parse: 65 callbacks suppressed [ 1093.176701][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1097.210505][T17714] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 1097.219316][T17714] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 1100.679992][ T4260] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.843028][ T4260] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.899846][ T4260] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.907395][ T4260] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1100.958116][ T4260] rtc rtc0: __rtc_set_alarm: err=-22 [ 1111.587185][T17873] netlink: 'syz.2.3366': attribute type 4 has an invalid length. [ 1112.888988][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3369'. [ 1114.327616][T17897] netlink: 'syz.6.3372': attribute type 1 has an invalid length. [ 1115.106554][T17906] overlayfs: failed to clone upperpath [ 1119.542729][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1130.023514][T18048] wlan0 speed is unknown, defaulting to 1000 [ 1130.037869][T18048] lo speed is unknown, defaulting to 1000 [ 1130.503858][T18053] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1130.528887][T18053] tipc: Enabled bearer , priority 10 [ 1139.691967][T18116] ceph: No mds server is up or the cluster is laggy [ 1146.415537][T18181] kthread_run failed with err -4 [ 1146.898279][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.906735][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1153.696300][T18253] wlan0 speed is unknown, defaulting to 1000 [ 1153.703950][T18253] lo speed is unknown, defaulting to 1000 [ 1153.981332][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3467'. [ 1154.255068][T18253] chnl_net:caif_netlink_parms(): no params data found [ 1155.789575][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 1155.899230][T18297] netlink: 'syz.2.3470': attribute type 1 has an invalid length. [ 1156.679954][T18253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.728411][T18253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.738483][T18253] device bridge_slave_0 entered promiscuous mode [ 1156.749569][T18253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.759325][T18253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.787455][T18253] device bridge_slave_1 entered promiscuous mode [ 1157.286887][T18253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.307482][T18253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.157910][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 1158.229683][T18253] team0: Port device team_slave_0 added [ 1158.260243][T18253] team0: Port device team_slave_1 added [ 1158.325891][T18253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.516306][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.542411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1158.720698][T18253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.161605][T18253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.228924][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.055798][T18253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.247904][T18253] device hsr_slave_0 entered promiscuous mode [ 1160.310551][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 1160.655070][T18346] netlink: 'syz.6.3484': attribute type 1 has an invalid length. [ 1161.014497][T18253] device hsr_slave_1 entered promiscuous mode [ 1161.357903][T18253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.365654][T18253] Cannot create hsr debugfs directory [ 1162.543338][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 1163.824718][T18253] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1163.940343][T18253] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1163.958934][T18253] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1163.994336][T18253] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1164.399163][T18253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.491090][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1164.520659][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1164.545222][T18253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.613331][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1164.768685][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1164.977532][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.984708][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.132977][T18419] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1165.239554][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1165.647591][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1165.663323][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1165.689933][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.697108][ T7510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.786457][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1165.802772][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1165.832591][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1165.927015][T18423] fuse: Bad value for 'fd' [ 1165.947499][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1166.591842][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1166.717162][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1166.742723][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1166.774631][T18253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1166.801841][T18253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1167.065373][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1167.153178][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1167.349208][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1167.483870][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1167.497890][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1168.068083][T18431] wlan0 speed is unknown, defaulting to 1000 [ 1168.074623][T18431] lo speed is unknown, defaulting to 1000 [ 1168.960635][T15439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1168.980257][T15439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1169.110434][T18253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.491415][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1169.511403][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1169.585039][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1169.594238][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1169.609120][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1169.625859][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1169.641796][T18253] device veth0_vlan entered promiscuous mode [ 1169.664090][T18253] device veth1_vlan entered promiscuous mode [ 1169.705582][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1169.721253][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1169.730608][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1169.748697][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1169.764151][T18253] device veth0_macvtap entered promiscuous mode [ 1169.783535][T18253] device veth1_macvtap entered promiscuous mode [ 1169.807826][T18253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.826625][T18253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.839024][T18253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.853651][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1169.869920][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1169.992294][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1170.250830][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1170.889358][T18253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1171.276264][T18253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.546650][T18253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1171.579191][T18253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.597364][T18253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.625383][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1171.646645][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1172.385229][T18253] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.465606][T18253] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.542242][T18253] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.591662][T18253] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.880647][ T7510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.914765][T15439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.918192][ T7510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.937528][T15439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.168459][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1175.856573][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1176.660219][T18561] binder: 18553:18561 ioctl c0306201 0 returned -14 [ 1179.252450][T18588] kthread_run failed with err -4 [ 1180.448297][T18615] siw: device registration error -23 [ 1186.636044][T18662] loop8: detected capacity change from 0 to 4096 [ 1188.310438][T18674] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1196.953367][T18771] overlayfs: failed to clone upperpath [ 1202.234275][T18806] loop8: detected capacity change from 0 to 4096 [ 1203.301558][T18817] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1206.602168][T18863] delete_channel: no stack [ 1207.743760][T18863] delete_channel: no stack [ 1208.013546][T18883] netlink: 13 bytes leftover after parsing attributes in process `syz.6.3610'. [ 1209.165955][T18893] loop8: detected capacity change from 0 to 512 [ 1209.882358][T18893] EXT4-fs (loop8): 1 orphan inode deleted [ 1209.895230][T18893] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1210.418718][T18893] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.108773][T18919] overlayfs: failed to clone upperpath [ 1212.117673][T18919] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1212.126445][T18919] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1212.135912][T18919] overlayfs: missing 'lowerdir' [ 1212.729839][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.736294][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1215.127090][T18941] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3625'. [ 1219.424199][T18977] loop8: detected capacity change from 0 to 8 [ 1219.776794][T18977] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1219.785091][T18977] SQUASHFS error: Failed to read block 0x144: -5 [ 1219.791428][T18977] SQUASHFS error: Unable to read metadata cache entry [142] [ 1219.798844][T18977] SQUASHFS error: Unable to read inode 0x11f [ 1220.237748][T18982] loop8: detected capacity change from 0 to 1024 [ 1223.091348][T19017] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1224.414925][T19040] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1224.967917][T19048] loop8: detected capacity change from 0 to 4096 [ 1226.452697][T19060] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1230.702777][T19096] Invalid ELF header magic: != ELF [ 1235.476746][T19143] loop8: detected capacity change from 0 to 4096 [ 1237.980601][T19160] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1242.044132][T19190] loop8: detected capacity change from 0 to 2048 [ 1242.271582][T19190] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 1242.590565][T19206] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1246.858739][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3697'. [ 1247.604690][T19243] tipc: Can't bind to reserved service type 0 [ 1255.635676][T19325] o2cb: This node has not been configured. [ 1255.642177][T19325] o2cb: Cluster check failed. Fix errors before retrying. [ 1255.649766][T19325] (syz.2.3727,19325,1):user_dlm_register:675 ERROR: status = -22 [ 1255.657735][T19325] (syz.2.3727,19325,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 1257.580209][T19335] netlink: 'syz.7.3728': attribute type 1 has an invalid length. [ 1270.363162][T19447] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3757'. [ 1270.810559][T19453] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1272.205669][T19464] rdma_rxe: rxe_register_device failed with error -23 [ 1272.213593][T19464] rdma_rxe: failed to add veth1_to_team [ 1277.090201][T19525] netlink: 'syz.2.3777': attribute type 16 has an invalid length. [ 1277.098153][T19525] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1278.561802][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1278.568309][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1280.192875][T19559] 9pnet: Could not find request transport: * [ 1280.192875][T19559] ó~]+Gf»õ臇õ:X [ 1280.192875][T19559] sFà Xî©vÖU ©v ç0x00000000000000080xffffffffffffffff [ 1283.378705][T19583] device syzkaller0 entered promiscuous mode [ 1286.044077][T15080] Bluetooth: hci3: command 0x0406 tx timeout [ 1286.367364][ T26] audit: type=1107 audit(2000000109.329:147): pid=19603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1288.913619][T19637] wlan0 speed is unknown, defaulting to 1000 [ 1288.924604][T19637] lo speed is unknown, defaulting to 1000 [ 1296.437171][T19693] device syzkaller0 entered promiscuous mode [ 1299.354576][T19729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1299.439130][T19730] overlayfs: failed to clone upperpath [ 1306.392824][T19787] loop8: detected capacity change from 0 to 4096 [ 1307.521833][T19801] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1307.615120][T19801] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1308.081011][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3847'. [ 1313.500617][T19873] 9pnet_virtio: no channels available for device syz [ 1314.731438][T19882] overlayfs: failed to clone lowerpath [ 1318.637171][T19932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1318.649909][T19932] loop8: detected capacity change from 0 to 1 [ 1319.332540][T19937] wlan0 speed is unknown, defaulting to 1000 [ 1319.339482][T19937] lo speed is unknown, defaulting to 1000 [ 1320.346114][T19944] loop8: detected capacity change from 0 to 2048 [ 1321.233261][T19944] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,,errors=continue. Quota mode: none. [ 1321.302678][T19944] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.642918][T19955] netlink: 'syz.2.3880': attribute type 1 has an invalid length. [ 1326.361644][T20008] netlink: 'syz.7.3893': attribute type 1 has an invalid length. [ 1331.135253][T20037] wlan0 speed is unknown, defaulting to 1000 [ 1331.148128][T20037] lo speed is unknown, defaulting to 1000 [ 1331.819524][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3902'. [ 1336.729248][T20090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3916'. [ 1342.718329][T20164] overlayfs: failed to clone lowerpath [ 1345.361969][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1345.368346][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1346.715894][ C1] ------------[ cut here ]------------ [ 1346.721642][ C1] WARNING: CPU: 1 PID: 20202 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 1346.732041][ C1] Modules linked in: [ 1346.736083][ C1] CPU: 1 PID: 20202 Comm: syz.1.3936 Not tainted syzkaller #0 [ 1346.743712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1346.753929][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 1346.760330][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d c0 2a f8 0f 0b e9 03 ef ff ff e8 01 c0 2a f8 <0f> 0b e9 76 f2 ff ff e8 15 89 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 1346.780195][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 1346.786551][ C1] RAX: ffffffff894e5f9f RBX: ffff888070dd6298 RCX: ffff888062a39dc0 [ 1346.794650][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.802671][ C1] RBP: ffffc90000dd0b08 R08: ffff888062a39dc0 R09: 0000000000000003 [ 1346.810787][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880232a2400 [ 1346.818923][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 1346.827079][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1346.836090][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1346.842813][ C1] CR2: 000000110c2bcf9e CR3: 000000000c08e000 CR4: 00000000003506e0 [ 1346.851038][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1346.859163][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1346.867251][ C1] Call Trace: [ 1346.870635][ C1] [ 1346.873564][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 1346.879648][ C1] ? verify_lock_unused+0x140/0x140 [ 1346.885018][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 1346.890195][ C1] ? verify_lock_unused+0x140/0x140 [ 1346.895532][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 1346.901115][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 1346.906801][ C1] __iterate_interfaces+0x243/0x500 [ 1346.912307][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1346.918666][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1346.925020][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 1346.932135][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 1346.937574][ C1] ? hw_scan_work+0xed0/0xed0 [ 1346.942364][ C1] __hrtimer_run_queues+0x4eb/0xb70 [ 1346.947817][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1346.953037][ C1] hrtimer_run_softirq+0x176/0x240 [ 1346.958307][ C1] handle_softirqs+0x339/0x830 [ 1346.963242][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1346.968278][ C1] ? do_softirq+0x210/0x210 [ 1346.972878][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1346.978321][ C1] __irq_exit_rcu+0x13b/0x230 [ 1346.983078][ C1] ? irq_exit_rcu+0x20/0x20 [ 1346.987678][ C1] irq_exit_rcu+0x5/0x20 [ 1346.991934][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1346.997884][ C1] [ 1347.000822][ C1] [ 1347.003752][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1347.009869][ C1] RIP: 0010:mark_page_accessed+0x3f3/0x12b0 [ 1347.015851][ C1] Code: ff e8 41 ef 1b 00 4d 8b 27 48 c7 c7 ff ff ff ff 4c 89 e6 e8 ef ee d6 ff 48 8b 04 24 80 3c 28 00 74 08 4c 89 f7 e8 1d ef 1b 00 <4d> 8b 3e 45 89 fd 41 83 e5 01 31 ff 4c 89 ee e8 c9 ee d6 ff 49 83 [ 1347.035561][ C1] RSP: 0018:ffffc90002dff508 EFLAGS: 00000246 [ 1347.041785][ C1] RAX: 1ffffd40002b5e59 RBX: ffffea00015af2c0 RCX: ffff888062a39dc0 [ 1347.049792][ C1] RDX: 0000000000000000 RSI: 00fff0000008001e RDI: ffffffffffffffff [ 1347.057897][ C1] RBP: dffffc0000000000 R08: ffffea00015af2c7 R09: 1ffffd40002b5e58 [ 1347.066293][ C1] R10: dffffc0000000000 R11: fffff940002b5e59 R12: 00fff0000008001e [ 1347.074413][ C1] R13: 0000000000000000 R14: ffffea00015af2c8 R15: ffffea00015af2c0 [ 1347.082566][ C1] ? mark_page_accessed+0x3e1/0x12b0 [ 1347.088723][ C1] ? __set_page_dirty_no_writeback+0x1c7/0x260 [ 1347.095162][ C1] unmap_page_range+0xde9/0x2500 [ 1347.100327][ C1] unmap_vmas+0x131/0x250 [ 1347.104810][ C1] ? unmap_page_range+0x2500/0x2500 [ 1347.110159][ C1] exit_mmap+0x3b9/0x640 [ 1347.114507][ C1] ? vm_brk+0x20/0x20 [ 1347.118568][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 1347.123845][ C1] ? mm_update_next_owner+0x522/0x640 [ 1347.129399][ C1] __mmput+0x115/0x3b0 [ 1347.133520][ C1] exit_mm+0x588/0x6e0 [ 1347.137699][ C1] ? xacct_add_tsk+0x4a0/0x4a0 [ 1347.142643][ C1] ? do_exit+0x20c0/0x20c0 [ 1347.147201][ C1] ? taskstats_exit+0x439/0xab0 [ 1347.152141][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 1347.157235][ C1] do_exit+0x5a9/0x20c0 [ 1347.161586][ C1] ? put_task_struct+0x80/0x80 [ 1347.166608][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1347.172794][ C1] ? lock_chain_count+0x20/0x20 [ 1347.177751][ C1] ? cgroup_freezing+0x264/0x310 [ 1347.183240][ C1] do_group_exit+0x12e/0x300 [ 1347.188163][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1347.193564][ C1] get_signal+0x6ca/0x12c0 [ 1347.198203][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 1347.204100][ C1] ? __sys_recvmmsg+0x290/0x290 [ 1347.209335][ C1] ? get_sigframe_size+0x10/0x10 [ 1347.214504][ C1] ? __x64_sys_recvmmsg+0x195/0x250 [ 1347.219785][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 1347.225534][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 1347.231491][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1347.237311][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1347.242911][ C1] do_syscall_64+0x58/0xa0 [ 1347.247441][ C1] ? clear_bhb_loop+0x30/0x80 [ 1347.252188][ C1] ? clear_bhb_loop+0x30/0x80 [ 1347.257040][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1347.262999][ C1] RIP: 0033:0x7f56d16f5cb9 [ 1347.267520][ C1] Code: Unable to access opcode bytes at RIP 0x7f56d16f5c8f. [ 1347.275026][ C1] RSP: 002b:00007f56cf930028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1347.283566][ C1] RAX: 0000000000010106 RBX: 00007f56d1971090 RCX: 00007f56d16f5cb9 [ 1347.291717][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1347.299880][ C1] RBP: 00007f56d1763bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1347.308173][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1347.316258][ C1] R13: 00007f56d1971128 R14: 00007f56d1971090 R15: 00007fff7fdc4158 [ 1347.324431][ C1] [ 1347.327541][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1347.334832][ C1] CPU: 1 PID: 20202 Comm: syz.1.3936 Not tainted syzkaller #0 [ 1347.342288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1347.352342][ C1] Call Trace: [ 1347.355622][ C1] [ 1347.358462][ C1] dump_stack_lvl+0x188/0x250 [ 1347.363171][ C1] ? show_regs_print_info+0x20/0x20 [ 1347.368371][ C1] ? load_image+0x400/0x400 [ 1347.372912][ C1] panic+0x2e5/0x810 [ 1347.376814][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1347.381330][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 1347.387052][ C1] __warn+0x248/0x2b0 [ 1347.391032][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 1347.396758][ C1] report_bug+0x1b7/0x2e0 [ 1347.401256][ C1] handle_bug+0x3a/0x70 [ 1347.405410][ C1] exc_invalid_op+0x16/0x40 [ 1347.409928][ C1] asm_exc_invalid_op+0x16/0x20 [ 1347.414862][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 1347.421198][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d c0 2a f8 0f 0b e9 03 ef ff ff e8 01 c0 2a f8 <0f> 0b e9 76 f2 ff ff e8 15 89 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 1347.440801][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 1347.446873][ C1] RAX: ffffffff894e5f9f RBX: ffff888070dd6298 RCX: ffff888062a39dc0 [ 1347.454932][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.462900][ C1] RBP: ffffc90000dd0b08 R08: ffff888062a39dc0 R09: 0000000000000003 [ 1347.470873][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880232a2400 [ 1347.478841][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 1347.486821][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 1347.492658][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 1347.498839][ C1] ? verify_lock_unused+0x140/0x140 [ 1347.504075][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 1347.509112][ C1] ? verify_lock_unused+0x140/0x140 [ 1347.514328][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 1347.519810][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 1347.525275][ C1] __iterate_interfaces+0x243/0x500 [ 1347.530473][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1347.536716][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1347.542954][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 1347.549981][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 1347.555184][ C1] ? hw_scan_work+0xed0/0xed0 [ 1347.560002][ C1] __hrtimer_run_queues+0x4eb/0xb70 [ 1347.565243][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1347.570363][ C1] hrtimer_run_softirq+0x176/0x240 [ 1347.575475][ C1] handle_softirqs+0x339/0x830 [ 1347.580243][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1347.585095][ C1] ? do_softirq+0x210/0x210 [ 1347.589689][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1347.594886][ C1] __irq_exit_rcu+0x13b/0x230 [ 1347.599645][ C1] ? irq_exit_rcu+0x20/0x20 [ 1347.604173][ C1] irq_exit_rcu+0x5/0x20 [ 1347.608411][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1347.614046][ C1] [ 1347.617057][ C1] [ 1347.619982][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1347.626101][ C1] RIP: 0010:mark_page_accessed+0x3f3/0x12b0 [ 1347.632010][ C1] Code: ff e8 41 ef 1b 00 4d 8b 27 48 c7 c7 ff ff ff ff 4c 89 e6 e8 ef ee d6 ff 48 8b 04 24 80 3c 28 00 74 08 4c 89 f7 e8 1d ef 1b 00 <4d> 8b 3e 45 89 fd 41 83 e5 01 31 ff 4c 89 ee e8 c9 ee d6 ff 49 83 [ 1347.651627][ C1] RSP: 0018:ffffc90002dff508 EFLAGS: 00000246 [ 1347.657704][ C1] RAX: 1ffffd40002b5e59 RBX: ffffea00015af2c0 RCX: ffff888062a39dc0 [ 1347.665675][ C1] RDX: 0000000000000000 RSI: 00fff0000008001e RDI: ffffffffffffffff [ 1347.673649][ C1] RBP: dffffc0000000000 R08: ffffea00015af2c7 R09: 1ffffd40002b5e58 [ 1347.681626][ C1] R10: dffffc0000000000 R11: fffff940002b5e59 R12: 00fff0000008001e [ 1347.689603][ C1] R13: 0000000000000000 R14: ffffea00015af2c8 R15: ffffea00015af2c0 [ 1347.697601][ C1] ? mark_page_accessed+0x3e1/0x12b0 [ 1347.702893][ C1] ? __set_page_dirty_no_writeback+0x1c7/0x260 [ 1347.709054][ C1] unmap_page_range+0xde9/0x2500 [ 1347.714021][ C1] unmap_vmas+0x131/0x250 [ 1347.718364][ C1] ? unmap_page_range+0x2500/0x2500 [ 1347.723574][ C1] exit_mmap+0x3b9/0x640 [ 1347.727907][ C1] ? vm_brk+0x20/0x20 [ 1347.731901][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 1347.737100][ C1] ? mm_update_next_owner+0x522/0x640 [ 1347.742480][ C1] __mmput+0x115/0x3b0 [ 1347.746553][ C1] exit_mm+0x588/0x6e0 [ 1347.750616][ C1] ? xacct_add_tsk+0x4a0/0x4a0 [ 1347.755379][ C1] ? do_exit+0x20c0/0x20c0 [ 1347.759796][ C1] ? taskstats_exit+0x439/0xab0 [ 1347.764654][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 1347.769511][ C1] do_exit+0x5a9/0x20c0 [ 1347.773675][ C1] ? put_task_struct+0x80/0x80 [ 1347.778436][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1347.784422][ C1] ? lock_chain_count+0x20/0x20 [ 1347.789278][ C1] ? cgroup_freezing+0x264/0x310 [ 1347.794221][ C1] do_group_exit+0x12e/0x300 [ 1347.798810][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1347.804015][ C1] get_signal+0x6ca/0x12c0 [ 1347.808449][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 1347.814092][ C1] ? __sys_recvmmsg+0x290/0x290 [ 1347.818956][ C1] ? get_sigframe_size+0x10/0x10 [ 1347.824168][ C1] ? __x64_sys_recvmmsg+0x195/0x250 [ 1347.829369][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 1347.834838][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 1347.840120][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1347.845666][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1347.851128][ C1] do_syscall_64+0x58/0xa0 [ 1347.855547][ C1] ? clear_bhb_loop+0x30/0x80 [ 1347.860237][ C1] ? clear_bhb_loop+0x30/0x80 [ 1347.864913][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1347.870801][ C1] RIP: 0033:0x7f56d16f5cb9 [ 1347.875219][ C1] Code: Unable to access opcode bytes at RIP 0x7f56d16f5c8f. [ 1347.882571][ C1] RSP: 002b:00007f56cf930028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1347.890985][ C1] RAX: 0000000000010106 RBX: 00007f56d1971090 RCX: 00007f56d16f5cb9 [ 1347.898952][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1347.906916][ C1] RBP: 00007f56d1763bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1347.914881][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1347.922849][ C1] R13: 00007f56d1971128 R14: 00007f56d1971090 R15: 00007fff7fdc4158 [ 1347.930832][ C1] [ 1347.934224][ C1] Kernel Offset: disabled [ 1347.938552][ C1] Rebooting in 86400 seconds..